{"id":3192891,"url":"https://alion.io/job/avanade-cybersecurity-ops-analyst","title":"Cybersecurity Ops Analyst","company":{"id":7762,"name":"Avanade","domain":"bit.ly","url":"https://alion.io/company/avanade","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"HeadHunter","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":71000,"max_usd":150000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":66},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-24T02:54:06Z","employer_posted_date":null,"last_verified_at":"2026-10-24T02:54:06Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Job Description:\n Perform advanced security event analysis as part of the 24/7/365 Enterprise Security Operations Center Detection & Response team\n Monitor, triage, and investigate security alerts and anomalous activity\n Determine severity, scope, potential impact, and appropriate response actions\n Analyze and correlate network, endpoint, system, and cloud telemetry using SIEM and EDR technologies\n Evaluate suspicious activity, threat intelligence, and vulnerability information to identify potential threats and assess organizational risk\n Execute approved response actions, including IP, URL, and hash blocks and endpoint isolation\n Escalate confirmed or suspected incidents to appropriate incident response teams\n Participate in proactive threat hunting to identify suspicious behavior, indicators of compromise, and detection gaps\n Document investigations, findings, evidence, and response actions in the incident tracking system\n Recommend detection tuning, process enhancements, and procedure and documentation updates\n Support onboarding and training of new analysts through knowledge sharing, cross-training, and technical assistance\n Collaborate with cybersecurity teams including GRC, architecture, and detection engineering\nRequirements:\n Bachelor’s degree and 2+ years of experience, or an Associate’s degree in a related discipline and 3+ years of experience\n An additional 4+ years of experience may be considered in lieu of a degree\n Must be a US Citizen\n Minimum 2 years of cybersecurity operations related experience\n Security+ and CySA+ certifications required\n Hands-on experience with SIEM and EDR technologies, including security alert investigation, endpoint analysis, and correlation of security events\n Experience triaging security incidents, assessing severity and potential impact, and determining escalation procedures\n Working knowledge of network security fundamentals and identification of suspicious network activity\n Working knowledge of Windows, Linux, and cloud environments, including relevant security logs, events, and telemetry\n Understanding of attacker tactics, techniques, and procedures, including the MITRE ATT&CK framework\n Ability to independently investigate complex or unfamiliar security events and exercise sound technical judgment\n Strong written and verbal communication skills, including clear documentation and coordination with technical and nontechnical stakeholders\n Ability to share technical knowledge and guide less experienced analysts\n Preferred: hands-on experience with Splunk Enterprise Security\n Preferred: experience with full incident response lifecycles, including containment, eradication, recovery, and post-incident analysis\n Preferred: proactive threat hunting and detection tuning experience\n Preferred: familiarity with Python, PowerShell, or similar scripting and automation technologies\nBenefits:\n Remote work anywhere in the United States\n 2nd shift or 3rd shift schedule option\n Equal Opportunity Employer","description_format":"text","description_chars":2987,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"associate","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Enterprise Apps Implementation Partners","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-10-24T02:54:06Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 39 · green card filings: 29","filings_12m":39,"filings_prev_12m":69,"green_card_filings_12m":29,"median_offered_wage_usd":147500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":9}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":31,"reasons":["seen:2","velocity","win:early","comp:junior"],"computed_at":"2026-10-26T05:57:25Z"},"pay":null,"html_url":"https://alion.io/job/avanade-cybersecurity-ops-analyst","json_url":"https://alion.io/job/avanade-cybersecurity-ops-analyst.json","meta":{"generated_at":"2026-10-26T15:33:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20697,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7762},"rest":"https://alion.io/mcp/rest/get_company?id=7762"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Favanade-cybersecurity-ops-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Favanade-cybersecurity-ops-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Favanade-cybersecurity-ops-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/avanade-cybersecurity-ops-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Favanade-cybersecurity-ops-analyst"}]}